Unit 2: Windows Security, User Management, and Networking - Practice Quiz

CSC104 — It Fundamentals 50 Questions
0 Correct 0 Wrong 50 Left
0/50

1 Which Windows component is responsible for storing local user account passwords in a hashed format?

A. Winlogon.exe
B. NTDS.dit
C. SAM (Security Account Manager)
D. pagefile.sys

2 In the context of Windows permissions, what happens when a user has Modify allow permissions via NTFS but Read allow permissions via the Network Share?

A. The user can only Read files.
B. The user has Full Control.
C. The user can modify files because NTFS takes precedence.
D. The user is denied access completely.

3 Which command-line tool is primarily used to display the current TCP/IP network configuration values, including the IP address and default gateway?

A. nslookup
B. tracert
C. ipconfig
D. netstat

4 What is the default TCP port number used by the Remote Desktop Protocol (RDP)?

A. 3389
B. 443
C. 8080
D. 22

5 Which Windows feature helps prevent unauthorized changes to the operating system by prompting the user for permission or an administrator password?

A. User Account Control (UAC)
B. Windows Defender
C. Windows Firewall
D. BitLocker

6 In the Windows Event Viewer, which specific log would record a successful or failed user logon attempt?

A. Application Log
B. Setup Log
C. System Log
D. Security Log

7 Which command is used to display the active TCP connections, ports on which the computer is listening, and Ethernet statistics?

A. ipconfig
B. netstat
C. whoami
D. ping

8 What symbol is appended to the end of a share name to make it a 'hidden' share in Windows?

A. %
B. #
C. $
D. !

9 Which protocol is primarily used by Windows for file and printer sharing across a local network?

A. SMTP
B. SMB (Server Message Block)
C. FTP
D. HTTP

10 What is the specific Windows Event ID associated with a successful logon?

A. 4625
B. 4672
C. 1102
D. 4624

11 Which Sysinternals tool allows a user to execute processes on other systems, often used for remote administration?

A. TCPView
B. ProcMon
C. Autoruns
D. PsExec

12 If a Windows client is configured for DHCP but cannot contact the DHCP server, it assigns itself an APIPA address in which range?

A.
B.
C.
D.

13 Which command-line tool outputs the current user's security identifiers (SIDs) and privileges?

A. get-acl
B. whoami /all
C. net user
D. sysinfo

14 Which Windows administrative tool allows for the centralized management of various system components using 'snap-ins'?

A. Control Panel
B. Task Manager
C. Registry Editor
D. MMC (Microsoft Management Console)

15 Which file system permission allows a user to take ownership of a file or folder?

A. Read
B. List Folder Contents
C. Write
D. Full Control

16 What is the primary function of the Domain Name System (DNS)?

A. Encrypting network traffic
B. Blocking malicious network packets
C. Resolving hostnames to IP addresses
D. Assigning IP addresses to clients

17 Which command is used to modify user accounts, such as adding a new user or changing a password, via the command line?

A. net group
B. net use
C. net share
D. net user

18 What is the name of the built-in antivirus and anti-malware component in modern Windows operating systems?

A. BitLocker
B. Windows Defender
C. Windows Firewall
D. SmartScreen

19 In the context of Windows Groups, which built-in group has complete and unrestricted access to the computer?

A. Users
B. Administrators
C. Backup Operators
D. Power Users

20 Which command allows you to view the list of currently running processes and their Process IDs (PIDs) in the command prompt?

A. runlist
B. tasklist
C. ps
D. processview

21 What does the command ipconfig /flushdns do?

A. Restarts the DNS server service
B. Clears the DNS resolver cache
C. Resets the IP address
D. Renews the DHCP lease

22 Which file path represents the default location for the local hosts file in Windows?

A. C:\Windows\System32\drivers\etc\hosts
B. C:\Users\Default\hosts
C. C:\Windows\hosts
D. C:\Windows\System32\config\hosts

23 Which Authentication protocol is the default for computers in an Active Directory domain and relies on tickets?

A. RADIUS
B. NTLM
C. LDAP
D. Kerberos

24 What is the executable name for the Windows Group Policy Editor?

A. secpol.msc
B. regedit.exe
C. gpedit.msc
D. services.msc

25 When configuring the Windows Firewall, what is the difference between Inbound and Outbound rules?

A. Inbound rules control traffic entering the PC; Outbound rules control traffic leaving.
B. Inbound rules control traffic leaving the PC; Outbound rules control traffic entering.
C. Inbound rules apply to servers; Outbound rules apply to clients.
D. There is no difference.

26 Which command allows you to map a network share to a local drive letter (e.g., Z:)?

A. net use
B. mount
C. net map
D. net share

27 What is the standard port number for SMB (Server Message Block) over TCP?

A. 139
B. 53
C. 445
D. 135

28 Which Windows service management console command is used to open the Services window?

A. taskmgr
B. eventvwr
C. services.msc
D. compmgmt.msc

29 In NTFS permissions, what is the effect of the 'Deny' permission?

A. It is overridden by an 'Allow' permission.
B. It only applies if no 'Allow' permission exists.
C. It only applies to the Guest account.
D. It takes precedence over 'Allow' permissions.

30 Which legacy Windows protocol allows applications on separate computers to communicate over a LAN and uses 15-character names?

A. NetBIOS
B. Telnet
C. DNS
D. DHCP

31 Which tool can be used to view programs that run automatically when Windows starts?

A. Event Viewer
B. Task Manager (Startup tab)
C. Disk Management
D. Task Scheduler

32 Which command is used to force a refresh of Group Policy settings on a client machine?

A. sysprep
B. gpresult /r
C. gpupdate /force
D. net pol update

33 What is a Security Identifier (SID) in Windows?

A. The IP address of the domain controller.
B. A unique alphanumeric character string that identifies each user, group, and computer account.
C. The user's login password.
D. The encryption key for the SAM database.

34 Which registry hive usually contains the Run keys that control startup programs for the local machine?

A. HKEY_CURRENT_CONFIG
B. HKEY_CLASSES_ROOT
C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
D. HKEY_USERS\.DEFAULT

35 What is the purpose of the Windows Audit Policy?

A. To automatically block suspicious IP addresses.
B. To enforce password complexity rules.
C. To compress old log files.
D. To determine which security events are recorded in the Event Logs.

36 Which command displays detailed configuration information about a computer and its operating system, including the OS version, install date, and hotfixes?

A. whoami
B. hostname
C. ver
D. systeminfo

37 If you need to investigate why a scheduled task failed to run, which tool would you check first?

A. Device Manager
B. Windows Firewall Logs
C. Resource Monitor
D. Task Scheduler History/Logs

38 What is the executable name for the Remote Desktop Connection client?

A. connect.exe
B. rdp.exe
C. remote.exe
D. mstsc.exe

39 Which type of user account is best practice for performing daily, non-administrative tasks?

A. System Account
B. Standard User Account
C. Guest Account
D. Administrator Account

40 In the output of netstat -ano, what does the -o switch display?

A. The owner of the process
B. The protocol used
C. The Process ID (PID)
D. The off-load state

41 Which folder permissions inheritance setting is the default behavior in NTFS?

A. Files do not inherit permissions.
B. Files inherit permissions from their parent folder.
C. Files inherit permissions from the user's profile.
D. Files inherit permissions from the root of the drive only.

42 What is the loopback IP address used to test the network interface on the local host?

A.
B.
C.
D.

43 Which Windows tool allows you to view and modify the registry?

A. regedit
B. gpedit
C. msconfig
D. dxdiag

44 Which command is used to display the routing table on a Windows machine?

A. None of the above
B. route print
C. Both A and B
D. netstat -r

45 What happens to the NTFS permissions of a file when it is moved to a different folder on the same volume?

A. It retains its original permissions.
B. It becomes read-only.
C. It inherits the permissions of the new folder.
D. All permissions are removed.

46 Which net command is used to list all the shares exported by the local computer?

A. net view
B. net export
C. net share
D. net session

47 Which protocol uses a 'Challenge-Response' mechanism and is considered less secure than Kerberos?

A. SSH
B. IPsec
C. TLS
D. NTLM (New Technology LAN Manager)

48 In the Windows Firewall, which profile typically applies when connected to a public Wi-Fi hotspot?

A. Work Profile
B. Public Profile
C. Domain Profile
D. Private Profile

49 Which administrative tool allows you to view hardware resources, update drivers, and disable hardware components?

A. Device Manager
B. Task Scheduler
C. Disk Management
D. ODBC Data Sources

50 What is the purpose of the ping command?

A. To transfer files between computers.
B. To find the path taken by packets.
C. To resolve a MAC address to an IP.
D. To test reachability of a host using ICMP Echo Request.